OWASP Top 10 Vulnerability Scanner
I'll scan your application for OWASP Top 10 vulnerabilities and provide remediation guidance for common web security issues.
Arguments: $ARGUMENTS - specific vulnerability category or full scan
OWASP Top 10 (2021) Coverage
Vulnerabilities Checked:
- A01:2021 - Broken Access Control
- A02:2021 - Cryptographic Failures
- A03:2021 - Injection (SQL, NoSQL, Command)
- A04:2021 - Insecure Design
- A05:2021 - Security Misconfiguration
- A06:2021 - Vulnerable Components
- A07:2021 - Authentication Failures
- A08:2021 - Data Integrity Failures
- A09:2021 - Logging & Monitoring Failures
- A10:2021 - Server-Side Request Forgery (SSRF)
Token Optimization
Expected range: 600–1,000 tokens (quick scan), 1,500–3,000 tokens (full scan)
Caching: Caches vulnerability patterns in .claude/cache/owasp-check/patterns/ for 7 days.
Early exit: Returns immediately on critical findings to surface them without scanning low-priority code.
Patterns used: Grep-before-Read, early exit, git diff scope default, caching, progressive disclosure